Cyber Security Analyst

CodeGama; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

CodeGama in Bengaluru, India is hiring a Cyber Security Analyst to protect applications, servers, cloud infrastructure, APIs, and systems from threats. You will monitor, assess, and respond to security events, enforce best practices, and collaborate with Dev and DevOps teams.

The role emphasizes vulnerability management, IAM, access controls, cloud security (AWS/Azure), and compliance with PCI DSS / ISO 27001.

Qualifications

• Experience securing Linux/Windows environments.
• Familiar with OWASP Top 10 and API security.
• Proficiency in SIEM and security log analysis.
• Knowledge of cloud security (AWS/Azure).
• Understanding of IAM, MFA, and access management.

Responsibilities

• Monitor servers, applications, networks, and security alerts for suspicious activities.
• Perform vulnerability assessments and coordinate remediation.
• Monitor and manage firewall, WAF, VPN, IDS/IPS, and endpoint security solutions.
• Investigate security incidents and perform root cause analysis.
• Review application and API security vulnerabilities based on OWASP standards.
• Perform server and operating system security hardening.
• Monitor authentication logs, unusual login attempts, and suspicious IP activity.
• Manage IAM, access controls, MFA, and privileged user access.
• Review AWS/Azure cloud security configurations.
• Implement security monitoring and alerting using SIEM/log management tools.
• Perform periodic security audits and risk assessments.
• Support penetration testing and vulnerability assessment activities.
• Maintain incident response procedures and security documentation.
• Assist with PCI DSS, ISO 27001, and other security compliance requirements.
• Work with Development and DevOps teams to resolve security vulnerabilities.

Skills

Linux and Windows security

Network security fundamentals

Firewall, WAF, VPN, IDS/IPS

Vulnerability assessment

OWASP Top 10/API security

AWS/Azure security fundamentals

IAM and access management

SIEM and security log analysis

Penetration testing basics

SSL/TLS and encryption concepts

Tools

Burp Suite

Nessus/OpenVAS

Nmap

Wireshark

Job description

We are looking for a Cyber Security Analyst to protect our applications, servers, cloud infrastructure, APIs, and organizational systems from security threats. The candidate will be responsible for security monitoring, vulnerability management, incident response, and implementation of security best practices.

Key Responsibilities

• Monitor servers, applications, networks, and security alerts for suspicious activities.
• Perform vulnerability assessments and coordinate remediation.
• Monitor and manage firewall, WAF, VPN, IDS/IPS, and endpoint security solutions.
• Investigate security incidents and perform root cause analysis.
• Review application and API security vulnerabilities based on OWASP standards.
• Perform server and operating system security hardening.
• Monitor authentication logs, unusual login attempts, and suspicious IP activity.
• Manage IAM, access controls, MFA, and privileged user access.
• Review AWS/Azure cloud security configurations.
• Implement security monitoring and alerting using SIEM/log management tools.
• Perform periodic security audits and risk assessments.
• Support penetration testing and vulnerability assessment activities.
• Maintain incident response procedures and security documentation.
• Assist with PCI DSS, ISO 27001, and other security compliance requirements.
• Work with Development and DevOps teams to resolve security vulnerabilities.

Required Skills

• Linux and Windows security
• Network security fundamentals
• Firewall, WAF, VPN, IDS/IPS
• Vulnerability assessment
• OWASP Top 10 and API security
• AWS/Azure security fundamentals
• IAM and access management
• SIEM and security log analysis
• Basic penetration testing knowledge
• SSL/TLS and encryption concepts
• Security tools such as Burp Suite, Nessus/OpenVAS, Nmap, Wireshark, or similar

Preferred Knowledge

• PCI DSS / ISO 27001
• Cloudflare or similar WAF solutions
• DevSecOps and CI/CD security
• Container/Docker security
• SAST/DAST tools
• Database security
• Secure API authentication and authorization